
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB7E9/E99E7F526E2E11EE85D92D32C4F9AE02/31FHCxXowUGvL6hGoowDs4WRurQ.mft
File: 31FHCxXowUGvL6hGoowDs4WRurQ.mft (raw, json)
Hash identifier: qXoxaGG7K22wFazBu5I0i/47JoF/mQloFNA+uYJ5iwI=
Subject key identifier: 8A:D5:7F:B5:11:12:C9:F6:2A:31:8A:EB:21:4D:D1:EF:A1:41:AC:E7
Authority key identifier: DF:51:47:0B:15:E8:C1:41:AF:2F:A8:46:A2:8C:03:B3:85:91:BA:B4
Certificate issuer: /CN=A91DB7E9/serialNumber=DF51470B15E8C141AF2FA846A28C03B38591BAB4
Certificate serial: 022D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31FHCxXowUGvL6hGoowDs4WRurQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DB7E9/E99E7F526E2E11EE85D92D32C4F9AE02/31FHCxXowUGvL6hGoowDs4WRurQ.mft
Manifest number: 021A
Signing time: Mon 27 Jul 2026 04:38:40 +0000
Manifest this update: Mon 27 Jul 2026 04:38:40 +0000
Manifest next update: Mon 03 Aug 2026 04:38:40 +0000
Files and hashes: 1: 31FHCxXowUGvL6hGoowDs4WRurQ.crl (hash: QxJ19f5nu3bqGl5H+L5Ob4TWNTbWxPxzLZ0mmSMLpI8=)
2: 361777766E2F11EE9F5DEF32C4F9AE02.roa (hash: 6r9HMe5N7O3EO/hoVyMLGjAo1zMWyRsh6cOTtVL/RMY=)
3: 7B50FA5EA13911EF8B634635C4F9AE02.roa (hash: 9GGpKqMuP60pZTecgihCPtCUwjJQr1u5VITWHt4kvQc=)
4: 367E2CC86E2F11EE9F5DEF32C4F9AE02.roa (hash: ZY1siwjbqnQaZCIx96bLhb0d0HA6YypX15NteDeXL0o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DB7E9/E99E7F526E2E11EE85D92D32C4F9AE02/31FHCxXowUGvL6hGoowDs4WRurQ.crl
rsync://rpki.apnic.net/member_repository/A91DB7E9/E99E7F526E2E11EE85D92D32C4F9AE02/31FHCxXowUGvL6hGoowDs4WRurQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31FHCxXowUGvL6hGoowDs4WRurQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 04:38:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 557 (0x22d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DB7E9, serialNumber=DF51470B15E8C141AF2FA846A28C03B38591BAB4
Validity
Not Before: Jul 27 04:38:40 2026 GMT
Not After : Aug 3 04:38:40 2026 GMT
Subject: CN=6a66e0d0-640d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:8a:3e:e8:a3:e8:eb:4c:27:b7:de:d6:07:2c:
4c:22:c9:cc:5c:bb:0a:46:ff:8d:ca:ba:a1:f3:e2:
26:91:e8:34:7a:53:9c:ed:a5:ba:55:c2:d8:c4:88:
b6:ba:80:17:f1:27:eb:e4:63:36:67:4b:f1:f1:fa:
95:29:2a:61:6c:62:40:f5:53:b4:44:ec:79:01:e6:
04:9b:dd:1d:f8:9a:08:76:31:a1:1c:74:32:28:95:
b1:b2:bd:16:fd:1f:fd:78:c7:37:a7:f3:f8:53:3c:
63:ea:50:14:c7:fa:b7:bd:0f:4e:a2:8e:a2:d7:f7:
a4:4d:8c:b1:ae:ea:1a:ed:8c:47:37:d6:4f:00:8a:
d8:07:81:41:3a:aa:54:97:23:61:50:90:14:2d:06:
58:fb:f8:23:2e:9b:d9:b1:f4:48:15:66:9d:82:4f:
de:d6:ad:ce:e8:0b:58:5d:55:75:00:bc:da:af:28:
f0:42:9b:58:d3:81:74:c5:99:67:de:96:35:c2:4a:
af:cc:51:3c:72:c6:7a:94:aa:0f:23:d5:dc:11:0c:
f1:a6:a0:4e:7c:50:0c:63:94:02:9b:b1:df:76:62:
28:44:9d:3c:53:bc:74:d9:2c:72:12:f5:d1:f9:0a:
ec:1d:38:41:70:3e:96:52:04:70:c0:87:7a:88:02:
b7:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:D5:7F:B5:11:12:C9:F6:2A:31:8A:EB:21:4D:D1:EF:A1:41:AC:E7
X509v3 Authority Key Identifier:
keyid:DF:51:47:0B:15:E8:C1:41:AF:2F:A8:46:A2:8C:03:B3:85:91:BA:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DB7E9/E99E7F526E2E11EE85D92D32C4F9AE02/31FHCxXowUGvL6hGoowDs4WRurQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31FHCxXowUGvL6hGoowDs4WRurQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB7E9/E99E7F526E2E11EE85D92D32C4F9AE02/31FHCxXowUGvL6hGoowDs4WRurQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
80:f5:40:a3:73:a3:0b:6e:54:e2:b7:c4:60:a1:87:71:7b:bb:
71:e9:bc:8c:2f:92:55:84:48:98:f0:10:9d:51:ea:15:79:9b:
d0:df:dd:40:a6:b6:97:f9:c1:f9:b1:c5:e2:3c:b4:6f:64:9a:
0b:86:b1:20:b7:20:ab:23:e6:d4:23:d6:16:64:0f:ed:bf:40:
1c:dc:39:65:6d:dc:05:95:7c:34:6b:e4:8d:68:38:65:db:a5:
e8:e8:81:9c:ab:f1:e6:d2:3f:3e:9e:c5:8b:f2:27:5c:eb:ed:
ff:2c:6e:61:cb:df:1b:63:5d:8f:72:6f:c1:cd:6a:8d:00:d2:
8b:3d:b0:39:d9:99:3e:3b:3e:8e:28:73:19:a0:b1:2d:0e:d5:
03:d0:93:de:d8:fc:68:eb:e8:43:7b:69:13:67:46:d7:7f:9d:
d9:56:04:fe:f4:99:6b:21:1b:b3:46:6e:e5:52:91:6f:df:b0:
ee:fa:41:99:8a:09:cd:62:34:5d:6d:5e:fe:ec:bf:b1:31:cb:
cc:73:3f:56:55:38:37:4d:68:fb:4c:ec:b8:d0:c5:30:37:1e:
4b:f0:4b:1b:77:e8:12:cd:9e:91:88:97:f1:b4:bb:35:fe:d9:
db:42:2d:7e:d6:04:63:3b:14:d1:f4:5c:df:1a:53:0d:c2:c2:
dd:ac:08:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:31:29 2026 by rpki-client